Re: FCatch

[Andrew Cagney <cagney at redhat dot com>]

Mike Cvet wrote:
> I just committed a new tool in /bindir called fcatch. Its purpose was to
> originally detect an exit (abnormal or otherwise) of a process and
> generate a stack trace at that point before the exit.
>
> Due to some current limitations with the TerminatingObserver and
> libunwind, fcatch at this point intercepts all signals and prints a
> stack trace from the receiving thread. Hopefully multithreaded support
> will come soon.
>   
The limitation is coming from the kernel.

The kernel revokes access to /proc (esp /proc/mem, and /proc/maps) prior 
to notifying frysk of the process terminating event.  This leaves frysk 
with only ptrace access, lame.

Andrew